CVE-2009-3931

The CVE refers to an incomplete blacklist in Google Chrome’s browser/download/download_exe.cc that, in Chrome before 3.0.195.32, could cause a remote attacker to force downloads of certain dangerous files via Content-Disposition: attachment (examples include .mht/.mhtml with IE6, .svg with Safari...